INFORMATION PROCESSING APPARATUS AND METHOD OF CONTROLLING SAME

• US 20140157436A1
• Filed: 10/29/2013
• Published: 06/05/2014
• Est. Priority Date: 12/04/2012
• Status: Active Grant

• Current Assignee: Fujitsu Limited
• Original Assignee: Fujitsu Limited
• Inventors: FUJISAKI, Naoya, Nimura, Kazuaki
• Granted Patent: US 9,280,674 B2
• Time in Patent Office: Days
• US Class Current: 726/28
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: G06F 21/53 by executing in a restricted environment, e.g. sandbox or secure virtual machine
• CPC Class Codes: G06F 21/60 Protecting data
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/606 by securing the transmission between two devices or processes
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/629 to features or functions of an application

Abstract

An information processing apparatus includes a memory and a processor coupled to the memory and configured to receive an instruction to transfer a first application to an execution environment, detect a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application, provide information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected, and invalidate a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received.

Claims

1. An information processing apparatus comprising:

a memory; and

a processor coupled to the memory and configured to;

receive an instruction to transfer a first application to an execution environment,

detect a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application,

provide information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected, and

invalidate a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received.

2. The information processing apparatus according to claim 1, wherein

the processor is configured to determine that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application.

3. The information processing apparatus according to claim 2, wherein

the processor is configured to cause the identification information assigned to the first application to be different from the identification information assigned to the second application to invalidate the state in which the second application shares the resource with the first application.

4. The information processing apparatus according to claim 1, wherein

the processor is configured to:

display a list including information for identifying the second application; and

determine whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected.

5. The information processing apparatus according to claim 1, wherein

the processor is configured to:

add information corresponding to the execution environment to a name of a folder to which the first application is stored, and

block calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment.

6. The information processing apparatus according to claim 5, wherein

the processor is configured to:

permit calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment.

7. The information processing apparatus according to claim 1, wherein

the processor is configured to:

collect evaluation information for evaluating whether each of the first application or the second application is reliable; and

permit transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information.

8. A method of controlling an information processing apparatus, the method comprising:

receiving an instruction to transfer a first application to an execution environment;

detecting a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application;

providing information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected; and

invalidating a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received.

9. The method according to claim 8, the method further comprising:

determining that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application.

10. The method according to claim 9, the method further comprising:

causing the identification information assigned to the first application to be different from the identification information assigned to the second application to invalidate the state in which the second application shares the resource with the first application.

11. The method according to claim 8, the method further comprising:

displaying a list including information for identifying the second application; and

determining whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected.

12. The method according to claim 8, the method further comprising:

adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and

blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment.

13. The method according to claim 12, the method further comprising:

permitting calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment.

14. The method according to claim 8, the method further comprising:

collecting evaluation information for evaluating whether each of the first application or the second application is reliable; and

permitting transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information.

15. A medium for storing a program that causes a processor to execute a process comprising:

receiving an instruction to transfer a first application to an execution environment;

detecting a second application that shares a resource with the first application, the resource being information used upon executing the first application and the second application;

providing information for causing a user to determine whether to prohibit transferring the second application to the execution environment when the second application is detected; and

invalidating a state in which the second application shares the resource with the first application when instruction to prohibit transferring the second application to the execution environment is received.

16. The medium according to claim 15, wherein the process further comprising:

determining that the second application shares the resource with the first application when identification information assigned to the second application is identical to identification information assigned to the first application.

17. The medium according to claim 16, wherein the process further comprising:

displaying a list including information for identifying the second application; and

determining whether the instruction to prohibit transferring the second application to the execution environment is received based on whether the information for identifying the second application is selected.

18. The medium according to claim 15, wherein the process further comprising:

adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and

blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment.

19. The medium according to claim 15, wherein the process further comprising:

adding information corresponding to the execution environment to a name of a folder to which the first application is stored, and

blocking calling the first application transferred to the execution environment from an application of which information for identifying the application does not include the information corresponding to the execution environment.

20. The medium according to claim 19, wherein the process further comprising:

permitting calling the first application transferred to the execution environment from an application of which information for identifying the application includes the information corresponding to the execution environment.

21. The medium according to claim 15, the process further comprising

collecting evaluation information for evaluating whether each of the first application or the second application is reliable;

and

permitting transferring each of the first application or the second application to the execution environment when each of the first application or the second application is determined to be reliable based on the evaluation information.